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Amendments to the Claims: 

1 . (Currently Amended) In a browser/server environment, a method for 
bootstrapping a user database associated with a web application from an application server, 
comprising: 

generating a user registration page request by a user of the web application and 
forwarding the user registration page request to the application server; 

by the application server, embedding security registration data requirements in the 
user registration page request and forwarding the user registration page request to a us e r 
r e g i strat i on pago of the web application; 

by the user reg i stration pag e of th e web application, merging the security registration 
data requirements from the application server with user profile registration requirements of 
the web application to form a user information request page; 

sending the user information request page from the web application to the user; 

returning a filled out user information request page to a pass through server target on 
the application server; 

extracting security data from the filled out user information page by the application 
server; and 

bootstrapping a user account, for the web application, in the user database by the 
application server based upon the extracted security data. 

2. (Previously Presented) A method as recited in claim 1 , further comprising: 
forwarding the filled out user information request page to the web application by the 

application server. 

3. (Previously Presented) A method as recited in claim 1 , wherein the 
application server makes available a set of user security requirements to the web application 
that define security data required to bootstrap the user account in the user database. 

4. (Previously Presented) A method as recited in claim 1 , wherein the web 
application includes a success target and a failure target, wherein the success target 
provides a success destination when the bootstrapping is successful, and wherein the failure 
target provides a failure destination when the bootstrapping is unsuccessful. 

5. (Original) A method as recited in claim 4, wherein the success destination is 
a success URL and wherein the failure destination is a failure URL. 
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6. (Cancelled) 

7. (Previously Presented) A method as recited in claim 2, wherein the forwarding 
the filled out user information page to the web application comprises: 

forwarding a subset of the security data and the collected user profile data. 

8. (Original) A method as recited in claim 7, further comprising: 
extracting the collected user profile data from the forwarded filled out user 

information page. 

9. (Original) A method as recited in claim 8, wherein the collected user profile 
data is stored in a user profile database. 

10. (Currently Amended) In a browser/server environment, an apparatus for 
bootstrapping a user database associated with a web application from an application server, 
comprising: 

a means for generating a user registration page request by a user of the web 
application and forwarding the user registration page request to the application server; 

a means for, by the application server, embedding security registration data 
requirements in the user registration page request and forwarding the user registration page 
request to a us e r r e gistration pag e of the web application; 

a means for, by the us e r r e g i stration pag e of th e web application, merging the 
security registration data requirements from the application server with user profile 
registration requirements of the web application to form a user information request page; 

a means for sending the user information request page from the web application to 
the user; 

a means for returning a filled out user information request page to the application 

server; 

a means for extracting security data from the filled out user information page by the 
application server; and 

a means for bootstrapping a user account, for the web application, in the user 
database by the application server based upon the extracted security data. 

1 1 . (Previously Presented) An apparatus as recited in claim 1 0, further 
comprising: 

a means for forwarding the filled out user information request page to the web 
application. 
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12. (Previously Presented) An apparatus as recited in claim 10, wherein the 
application server makes available a set of user security requirements to the web application 
that define security data required to bootstrap the user account in the user database. 

13. (Previously Presented) An apparatus as recited in claim 10, wherein the web 
application includes a success target and a failure target, wherein the success target 
provides a success destination when the bootstrapping is successful, and wherein the failure 
target provides a failure destination when the bootstrapping is unsuccessful. 

14. (Original) An apparatus as recited in claim 13, wherein the success 
destination is a success URL and wherein the failure destination is a failure URL. 

15. (Cancelled) 

16. (Previously Presented) An apparatus as recited in claim 11, wherein the 
forwarding the filled out user information page to the web application comprises: 

forwarding a subset of the security data and the collected user profile data. 

17. (Original) An apparatus as recited in claim 16, further comprising: 
extracting the collected user profile data from the forwarded filled out user 

information page. 

18. (Original) An apparatus as recited in claim 17, wherein the collected user 
profile data is stored in a user profile database. 

1 9. (Currently Amended) A computer program product for enabling a computing 
system to bootstrap a user database associated with a web application from an application 
server, the computer program product in a browser/server environment, comprising: 

computer code for generating a user registration page request by a user of the web 
application and forwarding the user registration page request to the application server; 

computer code for, by the application server, embedding security registration data 
requirements in the user registration page request and forwarding the user registration page 
request to a us e r r e gistrat i on pag e of the web application; 

computer code for, by the us e r r e g i strat i on pag e of th e w e b application, merging the 
security registration data requirements from the application server with user profile 
registration requirements of the web application to form a user information request page; 
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computer code for sending the user information request page from the web 
application to the user; 

computer code for returning a filled out user information request page to the 
application server; 

computer code for extracting security data from the filled out user information page 
by the application server; 

computer code for bootstrapping a user account in the user database by the 
application server based upon the extracted security data; and 

a computer readable medium for storing the computer program product. 
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